Add Forgot Password and Password Reset for admin accounts

[Copilot]

No mechanism existed for admin/commissioner accounts to recover access when their password was lost. This adds a self-service password reset flow to the Admin login screen.

Changes

Data layer

• IComissionerRepository / ComissionerRepository: new ResetPasswordAsync(username, fullName, newPassword) — looks up account by username + full name, updates BCrypt-hashed password on match

Service layer

• IElectionConfigurationService / ElectionConfigurationService: exposes ResetPasswordAsync delegating to the repository

UI

• ResetPasswordWindow (new): collects Username, Full Name, New Password, Confirm Password; validates inputs and password match (StringComparison.Ordinal); surfaces generic error on DB failure (no raw exception leakage)
• AdminLoginWindow: added "Forgot Password?" button that opens ResetPasswordWindow
• App.xaml.cs: registers ResetPasswordWindow in the DI container

Reset flow

User enters their username + full name as identity verification → if matched, password is updated with a new BCrypt hash → success dialog prompts re-login.

Identity verification relies on username + full name since the application has no email infrastructure. This is consistent with the existing security posture of the system.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• av-build-tel-api-v1.avaloniaui.net
  • Triggering command: /usr/share/dotnet/dotnet dotnet exec --runtimeconfig /home/REDACTED/.nuget/packages/avalonia.buildservices/11.3.2/tools/netstandard2.0/runtimeconfig.json /home/REDACTED/.nuget/packages/avalonia.buildservices/11.3.2/tools/netstandard2.0/Avalonia.BuildServices.Collector.dll (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Forgot Password and Password reset</issue_title>
<issue_description>Forgot Password and Password reset</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Forgot Password and Password reset #9

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.